Privacy Policy

Last updated: August 2026

1. Overview

This policy explains what information AURAX collects, how we use it, and your choices. By using the Service you agree to this policy.

2. Information we collect

  • Account data — your name, email, optional phone and country, and a hashed password.
  • Trading account data — the MT5 account numbers, server and settings you add, plus live metrics the bot reports (balance, equity, positions, profit, drawdown).
  • Usage & security data — login times, IP address, approximate location and browser, used to secure your account and show your login history.
  • Support data — messages and any details you include when you contact support.

3. How we use it

To provide and operate the Service, run and monitor the bot on your accounts, secure your account, provide support, send you notifications you opt into, process payments, and improve the Service.

4. Passwords & credentials

Portal passwords are stored only as salted hashes — we cannot read them. You are responsible for keeping any MT5 credentials you choose to store accurate and for the security of your trading account.

5. Notifications

If you connect a Telegram chat ID, we use it only to send the alerts you enable (e.g. bot status, profit, drawdown, daily report). You can change or remove it at any time in your settings.

6. Cookies

We use a small number of first-party cookies to keep you logged in and to measure basic marketing attribution. See our Cookie Policy for the full list and what each one does.

7. Sharing

We do not sell your personal data. We share data only with service providers needed to run the Service — currently this includes hosting/infrastructure providers, an email delivery provider for transactional messages (password resets, account notices), an IP-geolocation lookup used only for login-security alerts, and — where you opt in — Telegram, to deliver the specific alerts you enable. We share data with a payment provider only once live payment processing is active for your account; this page will be updated to name that provider before that goes live. We do not otherwise share data with third parties except where required by law. The anonymous leaderboard never exposes your identity — only a pseudonymous rank you can opt out of.

8. International transfers

Our hosting and service providers may process data outside your own country. Where this involves transferring personal data across borders, we rely on the safeguards required by applicable law; the specific list of subprocessors and transfer mechanisms is being finalized and will be published here once confirmed.

9. Retention

We keep your data for as long as your account is active and as needed to provide the Service and meet legal obligations. Specific retention periods per data category (e.g. security logs vs. trading history) have not yet been finalized — see the placeholder note below. You can request deletion of your account data through support.

10. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export or delete your personal data. Contact us through Contact or your portal to exercise them.

11. Security

We use reasonable technical and organisational measures to protect your data — including hashed passwords and encrypted storage of sensitive trading-account credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. See Contact to report a security concern.

12. Changes & contact

We may update this policy; material changes will be communicated through the Service. Questions can be raised through Contact or the support section of your portal.

Owner/legal placeholder

The controller entity name/address, a named Data Protection Officer (if required), the finalized subprocessor list, exact per-category retention periods, and the payment provider (once live) have not yet been confirmed by the AURAX owner and are intentionally not stated as final on this page.